Traffic Trace Info
DumpFile: 201304181400.dump
FileSize: 4747.13MB
Id: 201304181400
StartTime: Thu Apr 18 14:00:00 2013
EndTime: Thu Apr 18 14:15:00 2013
TotalTime: 899.82 seconds
TotalCapSize: -385.15MB CapLen: 96 bytes
# of packets: 67912819 (38769.09MB)
AvgRate: 361.44Mbps stddev:56.99M
IP flow (unique src/dst pair) Information
# of flows: 18587380 (avg. 3.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
9.1% 2.3% 2.1% 2.1% 1.8% 1.1% 1.0% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 14489803
Top 10 bandwidth usage (bytes/total in %):
10.1% 10.1% 9.8% 9.3% 6.0% 3.8% 3.6% 3.2% 2.6% 2.5%
# of IPv6 addresses: 12429
Top 10 bandwidth usage (bytes/total in %):
18.7% 16.9% 8.3% 6.2% 5.7% 4.2% 3.9% 3.9% 3.3% 3.2%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201304181400.pktlen.png)
detailed numbers
[ 32- 63]: 23834220
[ 64- 127]: 15084350
[ 128- 255]: 1352027
[ 256- 511]: 1407299
[ 512- 1023]: 1578560
[ 1024- 2047]: 24656363
Protocol Breakdown
![[protocol breakdown chart]](201304181400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 67912819 (100.00%) 40652332337 (100.00%) 598.60
ip 64581746 ( 95.10%) 37653995531 ( 92.62%) 583.04
tcp 41066257 ( 60.47%) 35204488891 ( 86.60%) 857.26
http(s) 20790803 ( 30.61%) 25787754336 ( 63.43%) 1240.34
http(c) 13739114 ( 20.23%) 4037003446 ( 9.93%) 293.83
squid 60693 ( 0.09%) 19734352 ( 0.05%) 325.15
smtp 97161 ( 0.14%) 26982688 ( 0.07%) 277.71
nntp 8 ( 0.00%) 480 ( 0.00%) 60.00
ftp 24668 ( 0.04%) 4093748 ( 0.01%) 165.95
pop3 4477 ( 0.01%) 1929423 ( 0.00%) 430.96
imap 10864 ( 0.02%) 6991450 ( 0.02%) 643.54
telnet 11234 ( 0.02%) 817357 ( 0.00%) 72.76
ssh 49704 ( 0.07%) 9350272 ( 0.02%) 188.12
dns 2358 ( 0.00%) 311987 ( 0.00%) 132.31
bgp 531 ( 0.00%) 110082 ( 0.00%) 207.31
napster 71 ( 0.00%) 8041 ( 0.00%) 113.25
realaud 35 ( 0.00%) 3747 ( 0.00%) 107.06
rtsp 8 ( 0.00%) 480 ( 0.00%) 60.00
icecast 40350 ( 0.06%) 22408676 ( 0.06%) 555.36
hotline 26 ( 0.00%) 3241 ( 0.00%) 124.65
other 6234044 ( 9.18%) 5286978605 ( 13.01%) 848.08
udp 2553733 ( 3.76%) 852654404 ( 2.10%) 333.89
dns 1035890 ( 1.53%) 272084479 ( 0.67%) 262.66
rip 24 ( 0.00%) 1584 ( 0.00%) 66.00
realaud 4 ( 0.00%) 738 ( 0.00%) 184.50
halflif 294 ( 0.00%) 62586 ( 0.00%) 212.88
starcra 19 ( 0.00%) 5772 ( 0.00%) 303.79
everque 14188 ( 0.02%) 13548153 ( 0.03%) 954.90
unreal 19 ( 0.00%) 2425 ( 0.00%) 127.63
quake 12 ( 0.00%) 1844 ( 0.00%) 153.67
cuseeme 5 ( 0.00%) 446 ( 0.00%) 89.20
other 1502991 ( 2.21%) 566764238 ( 1.39%) 377.09
icmp 20331228 ( 29.94%) 1267461379 ( 3.12%) 62.34
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 22979 ( 0.03%) 6597914 ( 0.02%) 287.13
ip6 560375 ( 0.83%) 314981023 ( 0.77%) 562.09
other 46989 ( 0.07%) 7792650 ( 0.02%) 165.84
frag 82464 ( 0.12%) 102594557 ( 0.25%) 1244.11
ip6 3331071 ( 4.90%) 2998336686 ( 7.38%) 900.11
tcp6 3174930 ( 4.68%) 2926022491 ( 7.20%) 921.60
http(s) 2726910 ( 4.02%) 2723136782 ( 6.70%) 998.62
http(c) 217068 ( 0.32%) 34337361 ( 0.08%) 158.19
smtp 90 ( 0.00%) 19631 ( 0.00%) 218.12
ftp 1313 ( 0.00%) 127126 ( 0.00%) 96.82
dns 726 ( 0.00%) 512598 ( 0.00%) 706.06
bgp 99 ( 0.00%) 22500 ( 0.00%) 227.27
other 228724 ( 0.34%) 167866493 ( 0.41%) 733.93
udp6 90123 ( 0.13%) 24834410 ( 0.06%) 275.56
dns 77221 ( 0.11%) 23377790 ( 0.06%) 302.74
halflif 3 ( 0.00%) 350 ( 0.00%) 116.67
unreal 1 ( 0.00%) 113 ( 0.00%) 113.00
quake 9 ( 0.00%) 798 ( 0.00%) 88.67
other 12889 ( 0.02%) 1455359 ( 0.00%) 112.91
icmp6 29010 ( 0.04%) 3128128 ( 0.01%) 107.83
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 36977 ( 0.05%) 44347441 ( 0.11%) 1199.33
tcpdump file: 201304181400.dump.gz (1517.68 MB)